Make NameIDPolicy optional in AuthRequest  aerialship/lightsaml#22